{"id":"https://openalex.org/W4387886061","doi":"https://doi.org/10.1109/access.2023.3327061","title":"IoT Network-Based Intrusion Detection Framework: A Solution to Process Ping Floods Originating From Embedded Devices","display_name":"IoT Network-Based Intrusion Detection Framework: A Solution to Process Ping Floods Originating From Embedded Devices","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4387886061","doi":"https://doi.org/10.1109/access.2023.3327061"},"language":"en","primary_location":{"id":"doi:10.1109/access.2023.3327061","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3327061","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10292643.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10292643.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5093114580","display_name":"Omar Almorabea","orcid":"https://orcid.org/0000-0003-2965-6778"},"institutions":[{"id":"https://openalex.org/I185163786","display_name":"King Abdulaziz University","ror":"https://ror.org/02ma4wv74","country_code":"SA","type":"education","lineage":["https://openalex.org/I185163786"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Omar Mohammed Almorabea","raw_affiliation_strings":["Department of Information Systems, Faculty of Computing and Information Technology, King Abdulaziz University, Jeddah, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0003-2965-6778","affiliations":[{"raw_affiliation_string":"Department of Information Systems, Faculty of Computing and Information Technology, King Abdulaziz University, Jeddah, Saudi Arabia","institution_ids":["https://openalex.org/I185163786"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057642361","display_name":"Tariq Jamil Saifullah Khanzada","orcid":"https://orcid.org/0000-0003-1617-4403"},"institutions":[{"id":"https://openalex.org/I180291457","display_name":"Mehran University of Engineering and Technology","ror":"https://ror.org/0575ttm03","country_code":"PK","type":"education","lineage":["https://openalex.org/I180291457"]},{"id":"https://openalex.org/I185163786","display_name":"King Abdulaziz University","ror":"https://ror.org/02ma4wv74","country_code":"SA","type":"education","lineage":["https://openalex.org/I185163786"]}],"countries":["PK","SA"],"is_corresponding":false,"raw_author_name":"Tariq Jamil Saifullah Khanzada","raw_affiliation_strings":["Department of Information Systems, Faculty of Computing and Information Technology, King Abdulaziz University, Jeddah, Saudi Arabia","Computer Systems Engineering Department, Mehran UET, Jamshoro, Pakistan"],"raw_orcid":"https://orcid.org/0000-0003-1617-4403","affiliations":[{"raw_affiliation_string":"Department of Information Systems, Faculty of Computing and Information Technology, King Abdulaziz University, Jeddah, Saudi Arabia","institution_ids":["https://openalex.org/I185163786"]},{"raw_affiliation_string":"Computer Systems Engineering Department, Mehran UET, Jamshoro, Pakistan","institution_ids":["https://openalex.org/I180291457"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039165527","display_name":"Muhammad Ahtisham Aslam","orcid":"https://orcid.org/0000-0001-7080-0327"},"institutions":[{"id":"https://openalex.org/I185163786","display_name":"King Abdulaziz University","ror":"https://ror.org/02ma4wv74","country_code":"SA","type":"education","lineage":["https://openalex.org/I185163786"]},{"id":"https://openalex.org/I2800804238","display_name":"Fraunhofer Institute for Open Communication Systems","ror":"https://ror.org/00px80p03","country_code":"DE","type":"facility","lineage":["https://openalex.org/I2800804238","https://openalex.org/I4923324"]}],"countries":["DE","SA"],"is_corresponding":false,"raw_author_name":"Muhammad Ahtisham Aslam","raw_affiliation_strings":["Fraunhofer FOKUS, Berlin, Germany","Department of Information Systems, Faculty of Computing and Information Technology, King Abdulaziz University, Jeddah, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0001-7080-0327","affiliations":[{"raw_affiliation_string":"Fraunhofer FOKUS, Berlin, Germany","institution_ids":["https://openalex.org/I2800804238"]},{"raw_affiliation_string":"Department of Information Systems, Faculty of Computing and Information Technology, King Abdulaziz University, Jeddah, Saudi Arabia","institution_ids":["https://openalex.org/I185163786"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048281396","display_name":"F. A. Hendi","orcid":"https://orcid.org/0000-0002-2657-7997"},"institutions":[{"id":"https://openalex.org/I185163786","display_name":"King Abdulaziz University","ror":"https://ror.org/02ma4wv74","country_code":"SA","type":"education","lineage":["https://openalex.org/I185163786"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Fatheah Ahmad Hendi","raw_affiliation_strings":["Department of Mathematics, King Abdulaziz University, Jeddah, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-2657-7997","affiliations":[{"raw_affiliation_string":"Department of Mathematics, King Abdulaziz University, Jeddah, Saudi Arabia","institution_ids":["https://openalex.org/I185163786"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5046651067","display_name":"Ahmad Almorabea","orcid":"https://orcid.org/0000-0002-5240-0263"},"institutions":[{"id":"https://openalex.org/I185163786","display_name":"King Abdulaziz University","ror":"https://ror.org/02ma4wv74","country_code":"SA","type":"education","lineage":["https://openalex.org/I185163786"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Ahmad Mohammed Almorabea","raw_affiliation_strings":["Department of Information Systems, Faculty of Computing and Information Technology, King Abdulaziz University, Jeddah, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-5240-0263","affiliations":[{"raw_affiliation_string":"Department of Information Systems, Faculty of Computing and Information Technology, King Abdulaziz University, Jeddah, Saudi Arabia","institution_ids":["https://openalex.org/I185163786"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":2.8075,"has_fulltext":true,"cited_by_count":16,"citation_normalized_percentile":{"value":0.91250756,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"11","issue":null,"first_page":"119118","last_page":"119145"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8173573017120361},{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.6892079710960388},{"id":"https://openalex.org/keywords/ping","display_name":"Ping (video games)","score":0.665702223777771},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.560142457485199},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.5180425643920898},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.5064202547073364},{"id":"https://openalex.org/keywords/internet-control-message-protocol","display_name":"Internet Control Message Protocol","score":0.4890769124031067},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.46690231561660767},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.45856037735939026},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.4508112668991089},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.44242241978645325},{"id":"https://openalex.org/keywords/confusion-matrix","display_name":"Confusion matrix","score":0.4257434904575348},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.4197510778903961},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3762524127960205},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.3600342869758606},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.33800607919692993},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.2510049343109131}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8173573017120361},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.6892079710960388},{"id":"https://openalex.org/C156308498","wikidata":"https://www.wikidata.org/wiki/Q1347898","display_name":"Ping (video games)","level":2,"score":0.665702223777771},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.560142457485199},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.5180425643920898},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.5064202547073364},{"id":"https://openalex.org/C195219913","wikidata":"https://www.wikidata.org/wiki/Q13162","display_name":"Internet Control Message Protocol","level":3,"score":0.4890769124031067},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46690231561660767},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.45856037735939026},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.4508112668991089},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.44242241978645325},{"id":"https://openalex.org/C138602881","wikidata":"https://www.wikidata.org/wiki/Q2709591","display_name":"Confusion matrix","level":2,"score":0.4257434904575348},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.4197510778903961},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3762524127960205},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.3600342869758606},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.33800607919692993},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2510049343109131},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/access.2023.3327061","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3327061","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10292643.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:ed93711e97a24b69902b2a9b6bfa3663","is_oa":true,"landing_page_url":"https://doaj.org/article/ed93711e97a24b69902b2a9b6bfa3663","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 11, Pp 119118-119145 (2023)","raw_type":"article"},{"id":"pmh:oai:publica.fraunhofer.de:publica/459282","is_oa":false,"landing_page_url":"https://publica.fraunhofer.de/handle/publica/459282","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"journal article"}],"best_oa_location":{"id":"doi:10.1109/access.2023.3327061","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3327061","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10292643.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4387886061.pdf","grobid_xml":"https://content.openalex.org/works/W4387886061.grobid-xml"},"referenced_works_count":34,"referenced_works":["https://openalex.org/W1920802909","https://openalex.org/W2479071993","https://openalex.org/W2536964097","https://openalex.org/W2589412831","https://openalex.org/W2797742547","https://openalex.org/W2799843691","https://openalex.org/W2811011461","https://openalex.org/W2910074034","https://openalex.org/W2936809465","https://openalex.org/W2940716932","https://openalex.org/W2951694401","https://openalex.org/W3007916142","https://openalex.org/W3030941702","https://openalex.org/W3033403042","https://openalex.org/W3033993695","https://openalex.org/W3035366189","https://openalex.org/W3075412364","https://openalex.org/W3081430061","https://openalex.org/W3088372203","https://openalex.org/W3105750153","https://openalex.org/W3118068844","https://openalex.org/W3172554013","https://openalex.org/W3196037479","https://openalex.org/W3217005176","https://openalex.org/W4210734430","https://openalex.org/W4220656594","https://openalex.org/W4226319939","https://openalex.org/W4245499680","https://openalex.org/W4285006276","https://openalex.org/W4285227650","https://openalex.org/W4310676124","https://openalex.org/W4384525022","https://openalex.org/W4393804247","https://openalex.org/W6743493502"],"related_works":["https://openalex.org/W2294483539","https://openalex.org/W2378449000","https://openalex.org/W2901835651","https://openalex.org/W2383902236","https://openalex.org/W4288326138","https://openalex.org/W2949824837","https://openalex.org/W2911594695","https://openalex.org/W2518483639","https://openalex.org/W2477776188","https://openalex.org/W1828765926"],"abstract_inverted_index":{"Internet":[0],"of":[1,183,202,232,237],"things":[2],"(IoT)":[3],"devices":[4,12,27,80],"are":[5,13,95,106,123,142,179],"gaining":[6],"traction":[7],"around":[8],"the":[9,98,102,129,157,168,187,200,220,241,244],"globe.":[10],"These":[11,121],"sometimes":[14],"hijacked":[15,26],"and":[16,88,117,136,147,155,234],"turned":[17],"into":[18],"zombies":[19],"or":[20],"botnets.":[21],"One":[22],"risk":[23],"posed":[24],"by":[25,60],"is":[28,163,196,199,211,240],"a":[29,47],"ping":[30,48,69,86,90],"flood":[31,49,70,91],"attack,":[32],"also":[33,164],"known":[34],"as":[35,128,198],"an":[36,54,62,75,229,235],"internet":[37],"control":[38],"message":[39],"protocol":[40],"echo":[41],"request":[42],"flood.":[43],"Current":[44],"literature":[45],"lacks":[46],"attack":[50,92],"dataset":[51],"generated":[52],"from":[53,97],"IoT":[55,63,76],"device.":[56],"This":[57,72],"paper":[58],"contributes":[59],"developing":[61],"network":[64],"intrusion":[65],"detection":[66,226],"framework":[67,73],"for":[68,171],"attacks.":[71],"deploys":[74],"testbed":[77,217],"using":[78,101,108,125,144],"embedded":[79],"to":[81,192],"emulate":[82],"two":[83],"datasets,":[84],"normal":[85],"traffic":[87,100,195],"malicious":[89,194],"traffic.":[93],"Features":[94],"extracted":[96],"captured":[99],"Zeek":[103],"tool.":[104],"Attacks":[105],"detected":[107],"three":[109,245],"machine":[110,203],"learning":[111,204],"algorithms:":[112],"logistic":[113],"regression,":[114],"K-nearest":[115,221],"neighbor,":[116],"support":[118],"vector":[119],"machine.":[120],"models":[122,141,158,205],"compared":[124,212],"evaluations":[126],"such":[127],"confusion":[130],"matrix,":[131],"accuracy,":[132,227],"precision,":[133],"recall,":[134],"F1-score,":[135],"misclassification":[137],"(error":[138],"rate).":[139],"The":[140,150,174,181,216],"validated":[143],"split":[145],"validation":[146],"cross-fold":[148],"validation.":[149],"time":[151,169,188],"consumed":[152],"in":[153],"training":[154],"testing":[156],"across":[159],"various":[160],"data":[161],"levels":[162],"analyzed,":[165],"along":[166],"with":[167,213,228],"required":[170],"feature":[172],"extraction.":[173],"discrepancies":[175],"between":[176,190],"capturing":[177],"tools":[178],"discussed.":[180],"use":[182],"criteria":[184],"based":[185],"on":[186,206],"difference":[189],"requests":[191],"detect":[193],"considered,":[197],"impact":[201],"memory":[207],"usage.":[208],"Our":[209],"work":[210],"similar":[214],"research.":[215],"concluded":[218],"that":[219],"neighbor":[222],"algorithm":[223],"achieved":[224],"99.67%":[225],"error":[230],"rate":[231],"0.33%":[233],"F1-score":[236],"99.67%,":[238],"which":[239],"best":[242],"amongst":[243],"algorithms.":[246]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}